Data Isolation Protocol

Your data, no matter the encrypted copy or the plain text, won't be sent to anywhere outside your device, except iCloud and Dropbox if the sync is on.

The data on the local storage or third-party cloud storage is always encrypted. It can be decrypted with your master password only.

If auto-unlock is on, a copy of your master key will be saved in the system keychain service. The keychain service is protected by macOS / iOS itself. The master password and key won't be synced.

iCloud sync is handled by the iOS / macOS system itself. Dropbox sync is manipulated by the official Dropbox SDK.

Elpass doesn't contain any third-party tracking or advertising code.

Elpass only initiates network requests when necessary. A detailed list is below.

All Possible Network Requests

When you launch Elpass, pay for a subscription, restore a subscription, or every 24 hours since launching, a few API requests are sent to our API server to confirm your subscription status. Our API server is located at https://api.elpass.app.